EP1755085B1 - Access control method for a door of an elevator system - Google Patents

Description

The present invention relates to a method for controlling the access for a door of an elevator installation. To carry out the method, three communication units are provided for sending and receiving an identification code, a confirmation code and an access code. In the method, the identification code is sent from a first communication unit to at least a second and a third communication unit. The second and third communication units check the identification code and return the confirmation code to the first communication unit if the verification was successful. The first communication unit then transmits the access code to the second communication unit. After a successful verification of the access code, the access is released.

Modern access control systems of buildings are often operated with a chip card, on which an electronic key is stored. For example, to gain access to an elevator installation, a terminal with a reading device for checking the chip card and delivering a destination call is set up near the elevator on each floor. Such smart cards can also be integrated or plugged into a mobile communication device, such as a mobile phone. In such access control systems, however, there is the disadvantage that the mobile communication device from which the destination call is issued can not be accurately located in terms of location. In particular, it often can not be identified on which floor the destination call has been issued. As a result, the destination call control has the lift system no information on which floor is the passenger to be transported.

From the EP 1 329 409 A2 there is known a system for guiding a user in a building. This access control system comprises at least one transceiver unit for communicating with a communication means of the user and at least one computing device for providing information to the user. The transceiver unit serves to identify the user's communication means locally within the building. The computer device transmits data for guiding the user in the building to the communication means via the transmitter / receiver unit.

In this access control system, it has proved to be disadvantageous that several transmitter / receiver units simultaneously emit code sequences for localization of the communication medium for localization of the communication means, which can lead to a superposition of the code sequences. Moreover, the localization of the user is made more difficult by the fact that the identification code sent by the communication means reaches several transmitter / receiver units. Already in the event that two transceiver units, which are arranged for example on two different floors, receive the identification code, the arithmetic unit can not distinguish whether the communication means and thus the user in the vicinity of a transmitter / receiver unit or the other transmitter / receiver unit is located.

The invention is based on the object of developing a method for controlling the access for a region accessible to persons so that the second communication unit can be localized exactly within the accessible area and thereby a user can be supplied with the correct information.

1. a) Empfang des Identifizierungscodes mit der zweiten Kommunikationseinheit, wobei die zweite Kommunikationseinheit ein ortsfestes Terminal in einem ersten Stockwerk ist, wobei das Senden des Identifizierungscodes mit einer vorbestimmten ersten Sendeleistung von wenigstens einer ersten Kommunikationseinheit erfolgt, wobei ein Benutzer auf dem ersten Stockwerk die erste Kommunikationseinheit mit sich führt;
2. b) Empfang des Identifizierungscodes mit der dritten Kommunikationseinheit, wobei die dritte Kommunikationseinheit ein ortsfestes Terminal in einem zweiten Stockwerk ist;
3. c) Überprüfung des Identifizierungscodes durch die zweite Kommunikationseinheit und durch die dritte Kommunikationseinheit;
4. d) Gleichzeitiges Senden des Bestätigungscodes mit einer zweiten Sendeleistung, die geringer als die erste Sendeleistung ist, von der zweiten Kommunikationseinheit und von der dritten Kommunikationseinheit an die erste Kommunikationseinheit, falls die Überprüfung des Identifizierungscodes durch die zweite Kommunikationseinheit und die Überprüfung des Identifizierungscodes durch die dritte Kommunikationseinheit erfolgreich waren, wobei der von der zweiten Kommunikationseinheit gesendete Bestätigungscode von der ersten Kommunikationseinheit empfangbar ist, und wobei der von der dritten Kommunikationseinheit gesendete Bestätigungscode von der ersten Kommunikationseinheit wegen der geringeren zweiten Sendeleistung nicht empfangbar ist;
5. e) Empfang des Zugangscodes mit der zweiten Kommunikationseinheit von der ersten Kommunikationseinheit, wobei die erste Kommunikationseinheit den auf einer Speichereinheit der ersten Kommunikationseinheit hinterlegten Zugangscode nach Empfang des von der zweiten Kommunikationseinheit gesendeten Bestätigungscodes sendet;
6. f) Überprüfung des Zugangscodes durch die zweite Kommunikationseinheit und
7. g) Freigabe des Zugangs bei einer erfolgreichen Überprüfung des Zugangscodes.

To achieve this object, it is provided according to the invention in a method with the features mentioned in the introduction in accordance with claim 1 that the method comprises the following steps:

1. a) receiving the identification code with the second communication unit, wherein the second communication unit is a fixed terminal on a first floor, wherein the transmission of the identification code with a predetermined first transmission power of at least a first communication unit, wherein a user on the first floor, the first communication unit with you;
2. b) receiving the identification code with the third communication unit, wherein the third communication unit is a fixed terminal in a second floor;
3. c) checking the identification code by the second communication unit and by the third communication unit;
4. d) simultaneously transmitting the confirmation code with a second transmission power, which is lower than the first transmission power, from the second communication unit and from the third communication unit to the first communication unit, if the verification of the identification code by the second communication unit and the verification of the identification code by the third Communication unit were successful, wherein the confirmation code sent by the second communication unit is receivable by the first communication unit, and wherein the confirmation code sent by the third communication unit is not receivable by the first communication unit because of the lower second transmission power;
5. e) receiving the access code with the second communication unit from the first communication unit, wherein the first communication unit the on a memory unit of the first communication unit stored access code after receiving the sent from the second communication unit confirmation code;
6. f) checking the access code by the second communication unit and
7. g) release of access upon successful verification of the access code.

The method according to the invention is based on the recognition that, after receiving an identification code sent by the first communication unit, the second communication unit transmits the confirmation code with a second transmission power, which is lower than the first transmission power, to the first communication unit. The second transmission power is preferably designed such that the confirmation code transmitted by the second communication unit can only be received in a near field in the region of the second communication unit. The near field in this case preferably has a range of less than about 2 m. Due to the transmission of the confirmation code with a comparatively low transmission power, it is avoided that an other person who is nearby, but who is staying in another part of the building because of the local conditions, is incorrectly localized.

Advantageous developments of the method according to the invention are described in the dependent claims.

In the method, it is provided that the identification code is sent only within a certain range of the communication unit. This proves to be particularly useful if the transmission of the identification code within a building takes place only in certain sections of the building or on certain floors, so that it can be determined whether a user is in the corresponding section of the building. Preferably, the range is up to 30 m.

In a development of the method according to the invention, it is proposed that the identification code be sent at predetermined times and / or within a predetermined period of time. In this way, at least with regard to the first communication unit, an energy saving due to the reduced power consumption can be achieved because in periods of absolute non-use of the building no transmission of the identification code is required.

In order to enable reliable and secure data transmission in the short-distance communication technology, the range is preferably less than approximately 5 m, in particular less than 1 m. Conventional interfaces, in particular infrared interfaces, can be used for the wireless, radio-based data transmission which is preferred in this case. The transmission standard is in particular the Bluetooth standard.

As a further security measure it can be provided that the access is released only within a predetermined period of time. For example, access for a first group of people can only be allowed during the day and for a second group only at night. To make this possible, the first communication unit and / or the second communication unit and / or the access code itself can be generated accordingly.

To set up a time-independent security measure, the access code is deleted after a predetermined number of uses to release the access in an advantageous development of the method. The deletion takes place either automatically or by an authorized person operating a central computer unit.

Preferably, a mobile telephone is used as the first communication unit. Thus it can be avoided that the user must carry along with his mobile phone another mobile communication unit. The second communication unit is a fixed terminal. In an application of the method for an elevator installation, for example, such a terminal can be positioned on each floor in the vicinity of the elevator shaft. The communication between the terminal and the first communication unit is then preferably via a near-field communication. The terminal may be provided freestanding in the vicinity of the elevator shaft or in the area of the elevator shaft in a building wall. In a freestanding arrangement, the

Terminal are used in the event of failure of the near-field communication of the user to enter a destination call.

The invention will be further explained with reference to the drawing.

The Fig. 1 schematically shows a system for controlling the access to a person accessible area in the form of an elevator system 1 with three elevators 2, 3, 4. In the area of the elevator system 1 is located on the first floor 5, a first terminal 20 and the second floor 6, a second Terminal 21. To gain access to one of the elevators 2, 3, 4, a user 30 carries a mobile telephone 10 forming a first communication unit. The mobile phone 10 is equipped with a storage unit, an interface, a display and a keyboard.

The user 30 enters the building on the first floor 5, for example via an underground car park. The mobile telephone 10 is program-wise set up so that it automatically emits an identification code over the duration of a predetermined period of time at predetermined times. As soon as the user 30 comes close to the fixed terminal 20, the terminal 20 receives the identification code sent by the mobile telephone 10. The subsequent verification of the identification code by the terminal 20 is carried out by comparing the identification code sent by the mobile telephone 10 with an identification code stored in a memory unit of the terminal 20 and, if the two identification codes match, the successful verification by sending a confirmation code from the terminal 20, with a second transmission power, which is lower than the first transmission power, is communicated to the mobile phone 10. The transmission power is designed so that the confirmation code is sent only within a range of about 2 m from the terminal 20. As a result, the confirmation code is received by the mobile only when the user is on the first floor 5 is located near the terminal 20. In this case, and if at the same time the terminal 21 on the second floor 6 sends a confirmation code with the second transmission power because it has received the identification code of the mobile phone 10, this will not be received by the mobile phone 10. The bluetooth standard is used to send the verification code.
Subsequently, an access code stored on the storage unit of the mobile telephone 10 is sent via the interface to the first terminal 20.

In this way, it is possible to localize where the user 30 and thus the mobile phone 10 he is carrying are located. After receiving the access code by the first terminal 20, the access code is compared with an original access code stored on the storage unit. If the access code matches the original access code, a destination call controller determines one or more elevators to service the destination call. Here, the user 30 by means of the mobile phone 10 and a corresponding menu with the help of the display and the keyboard, the priority of the destination call control recommended elevator or another elevator select. Upon selection of the elevator by the user 30, the destination call controller transmits corresponding data for guiding the user 30 to the selected elevator. The announcement of the data can be made via the display of the mobile phone 10 or via a display unit above the elevators. Alternatively, the data can also be transmitted to the user 30 via a voice output.
The above-described method for access control to the elevator installation 1 can also be transmitted in an unclaimed manner for controlling access to a room enclosed by a door. Furthermore, the above-described method can be carried out in an unclaimed manner, alternatively, such that the first communication unit 10 is implemented by a fixed terminal and the second communication unit 20 is formed by a mobile phone. Consequently, in this variant, the terminal sends the identification code to contact the mobile phone.

Claims (6)

1. Method of controlling access to a door (1) of an elevator system, with at least a first, a second, and a third communications unit for transmitting and receiving an identification code, an acknowledgement code, and an access code, wherein the method comprises the following steps:

   a) receiving the identification code with the second communications unit (20), wherein the second communications unit (20) is a stationary terminal on a first floor, wherein the identification code is transmitted at a predetermined first transmission power from at least one first communications unit (10), wherein a user on the first floor has the first communications unit (10) with him;

   b) receiving the identification code with the third communications unit (21), wherein the third communications unit (21) is a stationary terminal on a second floor;

   c) checking the identification code by the second communications unit (20) and by the third communications unit (21) ;

   d) simultaneously transmitting the acknowledgement code at a second transmission power that is lower than the first transmission power from the second communications unit (10) and from the third communications unit (21) to the first communications unit (20) if the check of the identification code by the second communications unit (20) and the check of the identification code by the third communications unit (21) were successful, wherein the acknowledgement code transmitted from the second communications unit (20) is receivable by the first communications unit (10), and wherein the acknowledgement code transmitted from the third communications unit (21) is not receivable by the first communications unit (10) due to the lower second transmission power;

   e) receiving the access code with the second communications unit (20) from the first communications unit (10), wherein the first communications unit (10), after receipt of the acknowledgement code transmitted from the second communications unit (20), transmits the access code filed in a memory unit of the first communications unit (10);

   f) checking the access code by the second communications unit (20); and,

   g) freeing the access if the check of the access code was successful.
2. Method according to claim 1, characterized in that the identification code and the acknowledgement code are transmitted at specific points in time and within a predetermined time period.
3. Method according to any one of claims 1 through 2, characterized in that the access is freed only within a predetermined time period.
4. Method according to any one of claims 1 through 3, characterized in that the access code is cancelled after a predetermined number of uses for freeing the access.
5. Method according to any one of claims 1 through 4, characterized in that a computer unit (40) generates the access code and communicates it to the first communications unit (10).
6. Method according to any of claims 1 through 5, characterized in that a mobile telephone is used as first communications unit (10).

Images